Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa
File: 4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa (raw, json)
Hash identifier: 5jTEYtlwChciosPin8VgYR9ZyCkKoJIGpsFdXvwfX9E=
Subject key identifier: E1:C9:D7:FA:01:96:DE:7B:0F:01:BF:05:97:40:AC:C0:45:56:0D:7B
Certificate issuer: /CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Certificate serial: 019426D9DAC6EB6B94175BF3FCF9F17030B1
Authority key identifier: 37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50982
IP address blocks: 193.105.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:da:c6:eb:6b:94:17:5b:f3:fc:f9:f1:70:30:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1c9d7fa0196de7b0f01bf059740acc045560d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:03:99:c0:82:e2:44:a7:bf:c4:91:5f:0a:
d2:c5:b4:8a:21:9b:e3:16:97:b7:6d:c6:45:aa:70:
86:f7:4d:1f:b1:f7:a2:98:4b:c2:f4:0e:f8:4a:82:
3f:7f:6e:12:1e:7e:17:38:78:a1:c0:87:61:3d:d4:
82:77:ea:6a:8d:a9:45:8d:26:43:52:50:47:09:6a:
fd:7d:01:e1:26:fb:55:e3:b9:5a:32:12:0d:3e:d8:
53:dc:86:d7:89:0e:cf:53:cc:86:e0:91:60:69:28:
a2:13:bb:31:06:e6:52:fc:44:7e:e7:ad:76:de:b7:
48:73:1e:99:b1:ca:3d:75:da:92:1e:29:36:7b:59:
31:0a:24:c2:03:63:f4:eb:41:3e:37:30:89:e1:20:
bd:8b:c9:4e:06:fb:c9:51:0e:d3:e0:e5:16:9e:1d:
0c:62:8c:5d:69:ed:2f:1a:20:50:ef:69:27:a6:21:
d4:68:5e:6d:2e:6e:44:e5:2e:b0:42:2c:7f:68:e6:
a4:cb:04:79:cf:ae:7f:5f:15:34:64:59:15:83:5f:
69:d6:e7:68:55:80:92:6f:f6:45:0c:e7:35:16:7f:
0d:65:b3:67:52:fa:3c:bc:19:0a:a3:4b:53:be:31:
e3:50:09:e6:dd:15:99:7e:40:fa:8e:10:23:e3:50:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C9:D7:FA:01:96:DE:7B:0F:01:BF:05:97:40:AC:C0:45:56:0D:7B
X509v3 Authority Key Identifier:
keyid:37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.26.0/24
Signature Algorithm: sha256WithRSAEncryption
97:32:81:a8:df:b9:e5:21:7e:8b:2b:bd:e9:7a:93:40:0e:14:
37:d2:cf:f7:9a:2b:d9:05:ec:dd:e2:cb:20:cd:91:24:ef:c2:
3f:31:4d:d4:55:59:9e:34:89:4a:4d:76:be:f5:ff:a1:7f:48:
b7:e6:6b:dd:90:52:14:02:c2:78:b4:ad:92:ea:26:3d:da:cc:
d7:d4:2f:47:37:6e:b1:57:3a:aa:5d:20:60:16:a1:d9:99:ce:
70:99:43:2b:2a:b1:fb:aa:9a:9c:e7:e4:c2:e6:e6:64:0f:b4:
fc:7d:31:77:3c:1f:fb:42:05:ff:73:04:d4:c1:2b:3e:5c:94:
d6:aa:59:d9:12:4e:9d:08:b1:37:33:09:88:de:ad:a4:cc:95:
73:b6:f1:d5:56:15:b3:ae:bb:1c:bd:96:ff:7b:e2:08:27:db:
bd:01:4c:b3:58:9a:80:d1:18:51:8c:d2:b5:72:a4:1f:74:cf:
ca:0d:86:f6:cb:e4:51:bf:0b:41:22:96:cd:19:47:c0:1e:22:
20:4f:04:bc:2d:7b:e5:92:b0:c6:13:4a:f6:f8:5c:d9:1d:89:
79:d9:26:9d:b8:69:46:4b:2d:58:3f:9d:62:e5:1f:2f:05:d1:
13:3b:ae:09:51:03:72:ce:8e:e6:83:37:f1:8c:24:53:1c:02:
44:17:eb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:29 2025 by rpki-client